Behavioral task
behavioral1
Sample
bd03b9448d0cb3ec79b5b01eb3865992.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
bd03b9448d0cb3ec79b5b01eb3865992.exe
Resource
win10v2004-20240226-en
General
-
Target
bd03b9448d0cb3ec79b5b01eb3865992
-
Size
30KB
-
MD5
bd03b9448d0cb3ec79b5b01eb3865992
-
SHA1
c1742af6e23cdef86fbe81e7bcd8c66aa2251995
-
SHA256
4234bf43518feebbd33e60503a62532a5eb7f648f6049248478fc86eaff591aa
-
SHA512
b5129790cbd4baa6b4252a499eec76fd48f7233ae9e7ab5eb27d317003f410cb5b1bd0b7ca7232697ca91fd1dd9d8c2484cd46fe34fa4d51a5a6be8aa4e03530
-
SSDEEP
768:aOsIP7IRNWUlaMijihcIGfTAy95w5HUWCvgnvh5gG:axYfMmiokyI5HUWAS
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd03b9448d0cb3ec79b5b01eb3865992
Files
-
bd03b9448d0cb3ec79b5b01eb3865992.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE